Reviewed-by: mullan

Reviewed-by: vinnie

Reviewed-by: weijun

Reviewed-by: clanger

Reviewed-by: weijun

Reviewed-by: mbalao, shade

Reviewed-by: mbalao, sgehwolf

--HG--
extra : amend_source : 80de2ae62559b587c8a6df3c459b714ecc0857c1

Reviewed-by: mbalao

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: shade

8175029: StackOverflowError in X509CRL and X509Certificate.verify(PublicKey, Provider)
8146293: Add support for RSASSA-PSS Signature algorithm
8205445: Add RSASSA-PSS Signature support to SunMSCAPI
8205720: KeyFactory#getKeySpec and translateKey throws NullPointerException with Invalid key
8206171: Signature#getParameters for RSASSA-PSS throws ProviderException when not initialized
8213009: Refactoring existing SunMSCAPI classes
8213010: Supporting keys created with certmgr.exe
8214096: sun.security.util.SignatureUtil passes null parameter, so JCE validation fails
8215694: keytool cannot generate RSASSA-PSS certificates
8221407: Windows 32bit build error in libsunmscapi/security.cpp
8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
8223003: SunMSCAPI keys are not cleaned up
8223063: Support CNG RSA keys
8225745: NoSuchAlgorithmException exception for SHA256withECDSA with RSASSA-PSS support
8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
Summary: Contains elements of JDK-8051408 (see comments on JDK-8230978)
Reviewed-by: valeriep, weijun, coffeys, pkoppula, andrew

--HG--
rename : src/windows/classes/sun/security/mscapi/Key.java => src/windows/classes/sun/security/mscapi/CKey.java
rename : src/windows/classes/sun/security/mscapi/RSAKeyPair.java => src/windows/classes/sun/security/mscapi/CKeyPair.java
rename : src/windows/classes/sun/security/mscapi/RSAKeyPairGenerator.java => src/windows/classes/sun/security/mscapi/CKeyPairGenerator.java
rename : src/windows/classes/sun/security/mscapi/KeyStore.java => src/windows/classes/sun/security/mscapi/CKeyStore.java
rename : src/windows/classes/sun/security/mscapi/RSAPrivateKey.java => src/windows/classes/sun/security/mscapi/CPrivateKey.java
rename : src/windows/classes/sun/security/mscapi/RSAPublicKey.java => src/windows/classes/sun/security/mscapi/CPublicKey.java
rename : src/windows/classes/sun/security/mscapi/RSACipher.java => src/windows/classes/sun/security/mscapi/CRSACipher.java
rename : src/windows/classes/sun/security/mscapi/RSASignature.java => src/windows/classes/sun/security/mscapi/CSignature.java

8144093: JEP 244/8051498 - TLS Application-Layer Protocol Negotiation Extension
8170282: Enable ALPN parameters to be supplied during the TLS handshake
8145849: ALPN: getHandshakeApplicationProtocol() always return null
8158978: ALPN not working when values are set directly on a SSLServerSocket
8171443: (spec) An ALPN callback function may also ignore ALPN
Reviewed-by: xuelei, coffeys, rhalade, andrew

Summary: Remove dependency on sun.misc.IOUtils.readFully(InputStream, int, boolean)
Reviewed-by: alanb, mchung, chegar
Contributed-by: NAlexandre Iline <alexandre.iline@oracle.com>

Reviewed-by: mbalao

8236983: [TESTBUG] Remove pointless catch block in test/jdk/sun/security/util/DerValue/BadValue.java
Reviewed-by: mbalao

Reviewed-by: andrew

Reviewed-by: mbalao

Reviewed-by: ahgross, mullan, valeriep

Reviewed-by: mbalao

Reviewed-by: mbalao

Reviewed-by: mullan

Reviewed-by: mbalao

Reviewed-by: mbalao

Reviewed-by: mbalao

8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes
Reviewed-by: mbalao

Reviewed-by: xuelei

Reviewed-by: weijun, andrew

Reviewed-by: andrew

Reviewed-by: clanger, andrew

Reviewed-by: clanger, andrew

Summary: Fixing a minor test bug in the SignatureDigestTruncate regression test
Reviewed-by: mullan

8055351: sun/security/provider/DSA/TestAlgParameterGenerator.java failed with interrupted! (timed out?)
Reviewed-by: valeriep, andrew, phh

Summary: The fix sets timeout for the server and the client, and ignore SocketTimeoutException.
Reviewed-by: chegar, phh, andrew
Contributed-by: NJohn Jiang <sha.jiang@oracle.com>

Reviewed-by: xuelei, andrew

8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size
Summary: Truncate the digest according to the group order, not the field size
Reviewed-by: shade, andrew

Reviewed-by: vinnie

Summary: internal library enhancements to support ECC implementatation
Reviewed-by: jnimeh, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Field arithmetic library for crypto algorithms like Poly1305 and X25519
Reviewed-by: xuelei, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>